Hello. AI agents that go rogue, drift, or get hijacked by hackers are as hard to detect as any insider threat. 

These digital helpers are granted access to apps and data so any out-of-bounds activity can go unnoticed unless behavioral tools are finely tuned.

Currently, organizations on average have roughly 45 digital identities for every one employee, according to Morey Haber, chief security adviser at BeyondTrust. And more AI agents come to life every day. Read our full story.

Also today: 

• High-severity bug in Palo Alto Networks firewalls
• Due diligence firm IMA Diligence Services hacked
• Hearing Wednesday on national privacy bill
• And more

Due diligence provider hacked. IMA Diligence Services, which does research for mergers and acquisitions, investments and other corporate transactions, is notifying tens of thousands of people in several states of a data breach. Hackers stole information in December from a file server managed by a third party, the company said in notices to regulators in Maine, Texas, California, Massachusetts and other states. 

• IMA said it has since decommissioned the server.
• Personal, financial, medical and health-insurance details were compromised.

Privately held lender Plaza Home Mortgage said a February cyberattack compromised personal data for customers and employees, including information related to loan applications. 

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten and James Rundle. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.